booking---comsdubai[.]webflow[.]io

The domain booking---comsdubai.webflow.io was registered on June 12, 2026 through the Webflow platform, a service that provides hosted website creation and content delivery. It resolves to the IP address 104.18.36.248, which belongs to the Cloudflare network and is commonly used for legitimate traffic as well as for abuse. VirusTotal records indicate that 14 of 91 security scanning engines have flagged the domain, suggesting a moderate level of detection across independent tools. The domain is listed on a single external blocklist and has been explicitly blocked by the PhishDestroy service, reinforcing the view that security operators consider it malicious.

The current operational status is marked as active and the risk rating is elevated, reflecting the combination of recent creation, hosting on a shared platform, and multiple vendor detections. Publicly available intelligence does not include details such as SSL certificate parameters, HTTP response codes, or page title content, so the exact nature of the hosted page remains unknown. No Safe Browsing or Open Threat Exchange entries are referenced in the supplied data. Consequently, while the infrastructure evidence points to a likely phishing or scam operation, the precise victim targeting or credential‑stealing mechanisms cannot be confirmed without further content analysis.

Defenders should treat the domain as hostile. Recommended actions include adding the hostname to network‑level URL blocklists, configuring email gateways to quarantine messages that contain the domain, and monitoring DNS queries for the IP 104.18.36.248 for anomalous spikes. Because the site is hosted on a shared CDN, broader blocking of the IP range may result in collateral impact; therefore, domain‑specific filtering is preferred. Continuous re‑evaluation is advised as additional telemetry, such as page snapshots or user reports, becomes available.